Flare Industries Privacy Policy

Who we are and what this policy covers

Kobi Peter Morris trading as Flare Industries (ABN 46 957 575 336) is responsible for the personal information described in this policy. In this policy, “Flare Industries”, “we”, “us” and “our” refer to that legal operator.

This policy covers this public website, its guided project brief and general enquiry form, the invited-client portal, optional website analytics, and related communications. Privacy questions, requests and complaints can be sent to contact@flareindustries.com.au.

Information you provide

Depending on how you use the website or continue an enquiry, we may collect:

• your name, business name, email address and phone number;
• the subject and content of a general enquiry;
• guided brief choices, including whether you want software or a website, the desired outcome, selected service, delivery or support preference, and the service recommendation generated from those choices;
• free-text project context, such as a current problem, rough idea, deadline or link;
• your acknowledgement of the form collection notice and privacy handling;
• later emails, call notes and other communications about the enquiry; and
• text, documents, images, names, logos or other attachments you choose to send later by email or another agreed channel. The current website forms do not accept file uploads.

Please do not provide passwords, payment card details, health information or other sensitive or security-critical information through the website forms.

Technical information and browser storage

When you access the site, our hosting provider, Netlify, may process technical request and security information such as your IP address, request date and time, requested URL, referring page, browser or device type, user-agent information and network or security event data. This information is used to deliver and protect the website, diagnose faults and prevent misuse.

The service guide uses your browser’s session storage to remember your selections while you move between questions or refresh the page. These selections are cleared when you choose to start again or the browser session ends. If you choose to discuss the recommendation, a summary is stored briefly so it can fill the enquiry form; that temporary summary is deleted after it is transferred. Nothing is sent to us until you submit the form.

The client portal stores the tokens needed to keep you signed in in browser session storage, or in local storage when you choose to remember your sign-in. Signing out clears that browser's stored portal session. These sign-in controls are separate from optional analytics and remain available when analytics is declined.

Optional website analytics

We offer Google Analytics 4 on public marketing pages to understand page views, visits, broad traffic sources and browser or device information. Google receives the technical request information needed to provide this service, including your IP address. We do not load the Google analytics tag or send analytics events until you choose Allow cookies. Choosing Only necessary keeps optional analytics disabled.

You can decline without losing access to the website or portal. Our integration disables advertising features and Google signals, sends page addresses without query strings or fragments, and reduces referring addresses to their website origin. Analytics does not run on client login, password-reset or portal pages. We do not send portal messages, documents, passwords or account email addresses to Analytics.

Your choice is stored in this browser for up to 180 days. If you accept, first-party Google Analytics cookies identify measured browser visits; their configured lifetime is up to 180 days. You can change your choice here. Withdrawal stops future collection in this browser and attempts to remove our accessible analytics cookies; the page may reload to unload the tag. It does not erase reports already collected.

You have not accepted analytics.

Invited-client portal

When you use an invited account, we process your email address, account and project membership, authentication and security information, and the requests, messages, project updates, documents, files and tables you choose to share. These support your project and communications with Flare Industries. Shared project content is available to the project's authorised members and Flare staff with the required access.

Supabase provides authentication, database and private file storage. Resend delivers account invitations, password-related emails and portal activity notifications. Portal records may include authorship and timestamps so collaborators can follow changes. Do not upload passwords, payment card details or sensitive personal information unless a separate agreed process specifically covers it.

Images and videos you attach to portal conversations are stored privately in Supabase and shared with the project's authorised members and Flare staff.

Why we collect and use information

We use personal information only where reasonably needed to:

• receive, assess and respond to an enquiry;
• understand the requested outcome and prepare a relevant next step, scope discussion or quote;
• communicate about availability, questions, meetings and the possible project;
• authenticate invited portal users, manage project access, and provide shared project communications and records;
• understand public website use through optional analytics where you have accepted it;
• operate, secure, troubleshoot and improve the website and enquiry process;
• detect spam, fraud, abuse and security incidents;
• maintain appropriate business, consent, tax and accounting records; and
• establish, exercise or defend legal rights and comply with applicable law.

We do not sell enquiry information or use it for unrelated advertising.

Providers and disclosures

The website, enquiry workflow and client portal use the following providers:

• Netlify, Inc. provides website hosting, content delivery, operational security, form processing, form submission storage and form notifications. Submitted forms are available in our Netlify account.
• Microsoft Corporation (Microsoft 365 and Outlook). Netlify sends an enquiry notification to our business mailbox at contact@flareindustries.com.au, where we read, store and respond to the message.
• Supabase. Provides client portal authentication, database and private file storage. The current project database is configured in Sydney.
• Resend. Delivers portal account invitations and password-related emails, processing recipient addresses, message content and delivery information.
• Google Analytics. Provides optional public website measurement after acceptance and aggregate reporting in the authorised project dashboard.

We may also disclose information to a contractor or professional adviser where reasonably necessary for the enquiry and subject to suitable confidentiality, or to a regulator, court, law-enforcement body or other person where authorised or required by law. We do not permit providers or advisers to use enquiry material for their own unrelated marketing.

You can read the providers’ current privacy information on the Netlify website and Microsoft website.

Overseas processing

Provider privacy information is available from Supabase, Resend and Google, as well as the hosting and email providers linked above.

Our providers operate international infrastructure. Although the portal database is configured in Sydney, information used for hosting, email delivery, authentication support or optional analytics may also be processed outside Australia, including in the United States and other countries where the relevant provider or its subprocessors operate. Provider infrastructure and subprocessor locations can change.

Privacy protections in another country may differ from those in Australia. We take reasonable steps when selecting and configuring providers and rely on their contractual, organisational and technical safeguards for cross-border processing.

How long we keep information

• Browser session data: kept in your browser only for the current guided-brief session, as described above.
• Portal sign-in: browser tokens remain for the session or remembered sign-in until they expire or are cleared, including by signing out. Account and project records are retained while needed to provide the project and meet the business-record purposes below.
• Analytics choices: where enabled, the browser choice and configured analytics cookie lifetime are up to 180 days. Report retention depends on the Analytics property's settings. Contact us about information already collected.
• General or unconverted enquiries: normally kept in Netlify and our email records for up to 24 months after the last meaningful contact, unless there is a continuing reason to retain them.
• Accepted projects and business records: relevant proposals, contracts, project communications, invoices and transaction records are ordinarily kept for seven years after completion or the last relevant transaction, or for another period required by law.
• Complaints, disputes and security matters: kept until the matter is resolved and any applicable review, claim or record-keeping period has ended.

When information is no longer reasonably needed, we delete it from the systems we control or de-identify it where that is practical. Residual copies may remain temporarily in provider backups or security logs until those copies are overwritten under the provider’s normal retention cycle.

Security

We use measures appropriate to this website’s current risk and size, including HTTPS in transit, access-controlled provider accounts, restricted form fields, spam protection, security headers and reputable hosting and email providers. We limit access to people who reasonably need the information.

No internet transmission, storage platform or security control is completely secure. We cannot promise absolute security. If you believe information connected with an enquiry has been exposed or misused, contact us promptly.

Access, correction and deletion

You may ask to access personal information we hold about you or ask us to correct information that is inaccurate, out of date, incomplete, irrelevant or misleading. You may also ask us to delete information where lawful and appropriate. We may need to verify your identity before acting and may retain information where required for a contract, invoice, dispute, security matter or legal obligation.

Send a written request to contact@flareindustries.com.au with enough detail for us to locate the information. We aim to respond within 30 calendar days. If we cannot fulfil a request, we will explain the reason where reasonably possible and identify available complaint options.

Marketing communications

The acknowledgement beside an enquiry form allows us to assess and respond to that enquiry; it is not consent to receive promotional email. We do not currently use website enquiries as a promotional mailing list.

If we introduce optional marketing email, we will request separate, express and optional consent. Each commercial message will identify Flare Industries, include accurate sender details and provide a functional unsubscribe method. You will be able to withdraw marketing consent at any time without affecting an existing enquiry or project.

Information handled during client projects

A client project may require Flare Industries to handle information belonging to a client or the client’s customers, users or staff. That project data is outside the ordinary website-enquiry workflow and is governed by the applicable services agreement, scope, confidentiality terms and any separate data-processing or security schedule. Those documents may impose additional limits, retention periods, security controls and incident procedures.

Privacy complaints

To make a complaint, email contact@flareindustries.com.au with the subject “Privacy complaint”. Please describe what happened, when it occurred, the information involved and the outcome you are seeking. We will acknowledge a written complaint within seven days and aim to provide a substantive written response within 30 calendar days. If more time is reasonably needed, we will explain why and provide an updated timeframe.

If the Privacy Act 1988 (Cth) applies to Flare Industries and you are not satisfied with our response, or we do not respond within 30 days, you may be able to complain to the Office of the Australian Information Commissioner. The OAIC may not have jurisdiction where a small-business exemption or another limitation applies.

Changes and contact

We will update this policy when our website forms, providers, tracking, retention practices or legal obligations materially change. The revision date above shows when this version took effect. A policy update does not retrospectively change a signed client agreement.

Privacy questions can be sent to Kobi Peter Morris trading as Flare Industries (ABN 46 957 575 336) at contact@flareindustries.com.au.